Overview

overview

10

Static

static

7

4be74eb319...cs.exe

windows7-x64

10

4be74eb319...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4be74eb319bba2430ab6ec9e9d69256934452193350ce51e66556db47186e5af_NeikiAnalytics

  • Size

    453KB

  • Sample

    240521-pr7pfaea3v

  • MD5

    2ee893018ba0c7be66311195b2145d60

  • SHA1

    35baefb9c33747514edf4f857a4d20704753e720

  • SHA256

    4be74eb319bba2430ab6ec9e9d69256934452193350ce51e66556db47186e5af

  • SHA512

    61efa74f7a06608d7bf2fc35a6ed9585c03fd2cb6d05899d37ee8b90184ffc728b31583d13059024a91fe18124e3d938712e5335035de853bc0c6943e605d48c

  • SSDEEP

    6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmB:x4wFHoS3eFaKHpv/VycgE81lgS

Score
10/10
blackmoonbankertrojanupx

Malware Config

Targets

    • Target

      4be74eb319bba2430ab6ec9e9d69256934452193350ce51e66556db47186e5af_NeikiAnalytics

    • Size

      453KB

    • MD5

      2ee893018ba0c7be66311195b2145d60

    • SHA1

      35baefb9c33747514edf4f857a4d20704753e720

    • SHA256

      4be74eb319bba2430ab6ec9e9d69256934452193350ce51e66556db47186e5af

    • SHA512

      61efa74f7a06608d7bf2fc35a6ed9585c03fd2cb6d05899d37ee8b90184ffc728b31583d13059024a91fe18124e3d938712e5335035de853bc0c6943e605d48c

    • SSDEEP

      6144:rcm4FmowdHoSphraHcpOaKHpXfRo0V8JcgE+ezpg1xrloBNTNmB:x4wFHoS3eFaKHpv/VycgE81lgS

    Score
    10/10
    blackmoonbankertrojanupx

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

      trojanbankerblackmoon

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks